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1. Which of the following descriptions about virtual private cloud VPC and peer-to-peer connections is 
wrong? 

A. After the peer-to-peer connection is established, it is necessary to add routes to the UPCs at both ends 
to communicate 

B. Considering the high availability of business, multiple VPC peering connections can be established 
between VPCs at the same time 

C. If the CIDR of the VPC has a heavy committee, but the subnets do not overlap, then a peer-to-peer 
connection can be established between the VPCs 

D. When creating a peer-to-peer connection between VPCs, by default a VPC cannot access the public 
network through the EIP of another VC 

Answer: B 


2. In the Kubernetes architecture, which of the following components can be used as a service to discover 
and store the state of the cluster and its configuration? 

A. Kubelet 

B. Kube-proxy 

C. API Server 

D. Eted 

Answer: D 


3. Cloud container instance service CCI provides serverless container (serverless container) introduction, 
so that users can run containers directly without creating and managing server clusters. In the following 
description about cloud container instance service CCI, which one is wrong? 

A. Can call or manage Kubermetes cluster resources 

B. Provide rich network access methods and support four-layer and seven-layer load balancing 

C. Supports multiple types of CPU computing resource calls, but does not support GPU computing for the 
time being 

D. Cloud container instances provide dedicated container instances, such as running Kata containers 
Answer: C 


4. As more and more enterprises go to the cloud, security on the cloud has become an important topic 
that needs attention. 

There are several major security requirements for enterprises to go to the cloud. Which of the following 
descriptions of security requirements on the cloud is wrong? 

A. The business on the cloud pursues business continuity without interruption, and the web application 
firewall VAF and anti-DDOS high-defense services are all for this purpose 

B. To protect the data stored on the cloud, it needs to be kept confidential, mainly restricting the 
inaccessibility of cloud service providers and external users 

C. The enterprise architecture on the cloud still needs to meet compliance requirements. HUAWEI 
CLOUD provides customers with one-stop public cloud protection services 

D. Enterprise cloud security pursues high efficiency in operation and maintenance, operation can be 
audited, and applicable products include CBH 

Answer: B 
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5. Which of the following descriptions about the use of the FunctionGraph service is wrong? 

A. In order to ensure the high reliability of the business, it is necessary to configure a separate business 
monitoring and operation and maintenance system for it 

B. Support online code editing and uploading JAR packages for code import, and support various types of 
triggers such as SIIN, APIG and OBS 

C. The underlying computing resources are provided and managed by FunctionGraph, including server 
CPU, memory, network and other resources 

D. When using FunctionGraph, there is no need to activate or pre-configure computing, storage, network 
and other services 

Answer: A 


6. With the rapid growth of Internet business, the application architecture is also constantly changing. 
Regarding the changes in the mainstream application architecture, which of the following options is not 
included? 

A. Microservice architecture 

B. SOA Architecture 

C. Monolithic architecture 

D. Atomic Architecture 

Answer: D 


7. An Internet company uses Huawei Cloud to deploy its business, uses IPCO1 to deploy its development 
environment, and uses C2 to deploy its test environment. 

Now that the development team wants to connect to the test group network and create a peer-to-peer 
connection service, which of the following needs to be confirmed before creating a peer-to-peer 
connection? 

A. Whether the development group and the test group have the same ACL forwarding rules 

B. Whether the development group and the test group are in the same region 

C. Whether the development group and the test group are in the same security group 

D. The development group and the test group must be on the same network segment 

Answer: D 


8. In software projects/engineering, CI/CD is a name that is often mentioned. In the following description 
about CI/CD, which one is wrong? 

A. Continuous Deployment: Continuous Deployment extends Continuous Documentation so that a 
software build can be automatically deployed after passing all tests 

B. Continuous Delivery: Continuous delivery can release verified code to a repository (such as GiLab) 
C. Continuous Integration: With continuous integration, developers are able to make multiple commits to 
the repository at any time 

D. Continuous integration Through continuous integration, developers need to submit content 
independently and uniformly at the end of the development cycle 

Answer: D 


9. Application operation and maintenance management service AOM is a three-dimensional operation 
and maintenance service centered on resource data and associated with logs, indicators, resources, 
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alarms, events and other data. Which of the following descriptions about AOM services is wrong? 

A. Through AOM, you can keep abreast of application resource usage, trends, alarms and other 
information, and monitor the health status of applications and related cloud resources in real time 

B. When the host accesses the AOM, the ICAgent software must be installed first. If the operating system 
does not support ICAgent, it cannot be supervised through the AOM 

C. Provide basic operation and maintenance services such as alarms, logs, monitoring, and indicators, as 
well as Al services such as normal detection and analysis 

D. Realize periodic keyword statistics by creating log statistics rules, and generate indicator teaching data 
Answer: B 


10. HUAWEI CLOUD provides complete solutions ranging from TaaS, PaaS, big data, and El enterprise 
intelligence. Which service does not belong to the application operation and maintenance platform? 

A. Cloud performance testing service CPTS 

B. Application operation and maintenance management service AOM 

C. Cloud audit service CTS 

D. Application performance management service APM 

Answer: A 


11. The data encryption service DE7 can effectively help users manage data security on HUAWEI! CLOUD. 
There are currently three application scenarios as follows, and the following three scenarios can be 
satisfied in turn. Which is the most recommended product order? 

1. Storage service encryption: integrate with OBS, EVS, VBS, IMS and other services to directly create 
encrypted storage services 

2. Application encryption: by calling the API, the upper layer application APP encryption is completed 
3. Blast-proof host login: When logging in to the host, bring your own private key for authentication and 
replace the password login method 

A. Key pair management KPS, key management KMS, exclusive encryption DHSM 

B. Dedicated encryption DHSM, key management KMS, key pair management KPS 

C. Dedicated encrypted DHSM, key management KMS, key management KMS 

D. Key management KMS, dedicated encryption DHSM, key pair management KPS 

Answer: D 


12. Under the same specifications, which of the following types of ECS instances has the strongest 
computing performance? 

A. H3. 8xlarge. 4 

B. C7. large. 2 

C. T6. xlarge. 1 

D. S7. large. 2 

Answer: A 


13. Which of the following descriptions about the product architecture of the document database service 
DDS replica set is wrong? 

A. The master node is used for read and write requests 

B. The standby node is used for read requests 
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C. Users can directly operate the primary node, standby node and hidden node 
D. The replica set architecture consists of primary nodes, standby nodes and hidden nodes 
Answer: C 


14. Among the campus solutions of the intelligent edge platform IEF, which one does not belong to the 
scope of IEF for distribution and management? 

A. Third-Party Edge Applications 

B. Third-party hardware gateway 

C. Edge Al algorithm 

D. Edge loT 

Answer: B 


15. In the Kubernetes cluster, Ingress provides an externally accessible URL for the Service and routes 
access traffic to the backend Service. 

Which of the following statements about Ingress is correct? 

A. Because Ingress can expose ports or protocols, it is more convenient to access than Service and 
Ingress 

B. If you need to use the Ingress function, you must first install the Ingress Controller on the Kubernetes 
cluster 

C. You can set an external domain name in the Service, and then access the Ingress through the domain 
name, and then access the back-end service 

D. Ingress is a containerized object that manages external access to services in the cluster. The typical 
access method is SSH 

Answer: B 


16. An Internet company creates a Linux system disk image through external image files. 

Which of the following descriptions about creating a system disk image is correct? 

A. Upload image file -> register image -> prepare image file -> use image to create cloud server 
B. Prepare image file -> upload image file -> register image -> use image to create cloud server 
C. Register image -> upload image file -> prepare image file -> use image to create cloud server 
D. Prepare image file -> register image -> upload image file -> use image to create cloud server 
Answer: B 


17. Which of the following does not belong to the ECS specification type? 
A. Memory optimized 

B. Customized performance type 

C. CPU accelerated type 

D. High performance computing 

Answer: B 


18. Users can deploy various services through the elastic cloud server ECS according to their needs, but 
it does not mean that they can use the cloud server to perform any operations. Which of the following 
descriptions about the use of elastic cloud servers is correct? 

A. Build a crawler environment on the elastic cloud server to collect various data 
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B. Use the elastic cloud server to launch a network attack on the external system to test the stability of the 
system 

C. Use elastic cloud servers to build services such as private servers or unaudited cross-border VPNs 

D. To meet new business requirements, switch the operating system of the elastic server 

Answer: D 


19. Cloud native 2.0 is a new stage of enterprise intelligence upgrade. Enterprise cloudification has 
moved from "ON Loud" to "IN Cud", becoming a "new cloud native enterprise". Which of the following 
descriptions about cloud native 2.0 is wrong? 

A. The enterprise's new business capabilities are built on the basis of cloud native, making it born in the 
cloud 

B. Existing capabilities are inherited in an unbreakable way and organically synergized with new 
capabilities 

C. The full life cycle of applications, data and Al is completed on the cloud, making it longer than the cloud 
D. Using cloud container services to provide services belongs to cloud native 2.0 

Answer: D 


20. Cloud hard disk EVS can provide cloud servers with highly reliable, high-performance, rich 
specifications and elastically expandable block storage services, which can meet the business needs of 
different scenarios. According to different performances, it can be divided into: ultra-fast SSD, ultra-high 
Type 10, General Purpose SSD and High Type 10. 

An existing Internet start-up company deploys its business on a cloud server. In order to complete the 
daily development and testing of the business, which of the following specifications of the cloud hard disk 
is the cheapest? 

A. Ultra-high IO cloud hard disk 

B. High IO cloud hard disk 

C. Extremely fast SSD cloud hard disk 

D. Universal SSD Cloud Disk 

Answer: B 


21. Which of the following descriptions about bare metal server BMS is wrong? 

A. Bare metal servers and virtual machines have virtualization overhead, resulting in a certain loss of 
computing performance 

B. Bare metal servers are dedicated computing resources for users, and support VPC and security group 
isolation 

C. Bare metal servers are currently divided into two types according to the CPU architecture: x86 
instances and Kunpeng instances 

D. The billing mode of BMS is yearly and monthly, and does not support pay-as-you-go 

Answer: A 


